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Top Stories 

• At least 26 tornadoes moved through Texas and Arkansas May 10, leaving 5 people dead, 
26 injured, and 8 unaccounted for as the tornadoes knocked out power to approximately 
28,040 people and caused extensive damage. - NBC News; Associated Press (See item 1) 

• A transformer fire at the Indian Point nuclear station in Buchanan, New York, shut down 
the plant’s Unit 3 reactor and caused at least 15,000 gallons of oil to spill into the Hudson 
River May 9. - WABC 7 New York City (See item 4 ) 

• U.S officials reported May 8 that a former U.S. Department of Energy (DOE) and U.S. 
Nuclear Regulatory Commission employee was extradited to the U.S. from the Philippines 
to face charges for allegedly attempting to infiltrate the DOE’s system to steal nuclear 
secrets to sell to a foreign government. - Washington Post (See item 18 ) 

• Nebraska officials reported that 2 inmates were found dead and 2 others were injured in a 
May 10 riot at Tecumseh State Prison. - Omaha World-Herald (See item 20 ) 
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Energy Sector 



1. May 11, NBC News; Associated Press - (Texas; Arkansas) Van, Texas, and Nashville, 
Arkansas, hit by suspected tornados. At least 26 reported tornados moved through 
Texas and Arkansas May 10, leaving 5 people dead at least 26 others injured, and about 
8 people unaccounted for as the tornados knocked out power to approximately 28,040 
people and caused extensive damage to homes, cars, and schools. 

Source: http://www.nbcnews.com/news/weather/van-texas-nashville-arkansas-hit- 
suspected-twisters-n35691 1 

2. May 9, Forum of Fargo-Moorhead - (North Dakota) Produced water pipeline spill 
reported in Mandaree area. Tribal authorities reported May 9 that a Crestwood- 
owned pipeline spilled about 220,000 gallons of produced water in a field near 
Mandaree on the Fort Berthold Indian Reservation, and that the spilled brine had no 
direct impact on major waterways. Officials were working on a response plan. 

Source: http://www.wday.com/news/north-dakota/3741549-produced-water-pipeline- 
spill-reported-mandaree-area 

[ Return to top ] 

Chemical Industry Sector 

Nothing to report 
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Nuclear Reactors, Materials, and Waste Sector 

3. May 11, Toledo Blade - (Ohio) Steam-leak repairs keep David-Besse shut down. 
FirstEnergy officials reported that the Davis-Besse Nuclear Power Station in Oak 
Harbor remained shut down May 10 while crews examined and repaired a steam leak in 
a pipe from the nonradio active portion of the plant May 9. Electric service for 
customers will not be affected. 

Source: http://www.toledoblade.com/local/2015/05/ll/Steam-leak-repairs-keep-Davis- 
Besse-shut-down.html 

4. May 10, WABC 7 New York City - (New York) Part of Indian Point Nuclear Plant 
still shut down after transformer fire. A transformer fire at the Entergy Corporation’s 
Indian Point nuclear station in Buchanan prompted the shutdown of the plant’s Unit 3 
reactor and caused at least 15,000 gallons of oil to spill into the Hudson River May 9. 
Officials reported that most of the oil was contained with no impact on the public, and 
that the plant remains offline while the incident is investigated. 

Source: http://7online.com/news/cleanup-underway-of-oil-in-hudson-river-after-indian- 
point-fire/7 10359/ 

For another story, see item 18 
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Critical Manufacturing Sector 

5. May 8, Securityweek - (National) Rockwell Automation fixes flaw in factory 

communication solution. Rockwell Automation released software updates to address a 
buffer overflow vulnerability in its RSLinx Classic comprehensive factory 
communication server solution in which an attacker could crash the application or 
inject malicious code with elevated privileges by loading a specially crafted concurrent 
versions system (CVS) file to trigger a stack-based buffer overflow in the application. 
Source: http://www.securitvweek.com/rockwell-automation-fixes-flaw-factorv- 
communication-solution 

[ Return to top ] 



Defense Industrial Base Sector 

Nothing to report 
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Financial Services Sector 

6. May 9, Denver Post; Associated Press - (Colorado) FBI agent shot at motel; suspect 
dead. An FBI agent was injured May 8 after being fired upon while trying to serve an 
arrest warrant at a Littleton motel to the bank robbery suspected dubbed “The 
Longhorn Bandit,” who had allegedly robbed multiple banks in the area since February 
Authorities reported that officers did not fire any shots, and that the suspect was found 
dead in his room. 

Source: http://www.denverpost.com/news/ci 280798 1 3/swat-surrounds-essex-house- 
motel-littleton 

[ Return to top ] 

Transportation Systems Sector 

7. May 11, Associated Press - (North Carolina) Plane makes emergency landing in 
Greensboro. A United Airlines flight from San Francisco to Raleigh-Durham 
International Airport in North Carolina made an emergency landing at Piedmont Triad 
International Airport in Greensboro on one engine May 10. 

Source: http://abcl 1 ■com/news/plane-headed-for-rdu-makes-emergency-/7 1 2770/ 

8. May 10, Bradenton Herald - (Florida) Interstate 75 in Charlotte County reopens 
after wildfire shutdown. All lanes of Interstate 75 in Charlotte County were reopened 
after a portion of the interstate was closed for approximately 4 hours May 10 due to a 
wildfire in the area. 

Source: http://www.bradenton.com/2015/05/10/5792190 wildfire-closes-interstate- 
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75.html 



9. May 9, WX1A Atlanta - (Georgia) 4 killed when small plane crashes on 1-285 in 
DeKalb. All lanes of Interstate 285 in DeKalb County, Georgia, were blocked for 
several hours May 8 after a single-engine Piper PA-32 aircraft crashed onto the 
interstate, killing all 4 individuals onboard. Authorities will conduct a flight 
reconstruction in their investigating into the crash. 

Source: http://www.llalive.com/story/news/local/doraville/2015/05/08/plane-crash- 
i285 -dekalb/26974275/ 

10. May 9, West Virginia MetroNews - (West Virginia) 1-79 reopens 7 hours after fiery 
wreck. Interstate 79 near Morgantown reopened after closing for 7 hours May 8 while 
officials responded to the scene of a fiery crash after a semi-truck hauling 4,500 gallons 
of diesel fuel overturned and injured 1 person. Authorities are investigating and 
monitoring waterways after learning that the wreck may have caused a chemical spill 
into Scott’s Run. 

Source: http://wvmetronews.com/2015/05/09/i-79-closed-north-of-morgantown-after- 
fiery-truck-crash/ 
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Food and Agriculture Sector 

11. May 9, U.S. Department of Agriculture - (Alabama; Georgia) Walker’s Foods recalls 
pork products due to misbranding and an undeclared allergen. Carrolton, Georgia- 
based Walker’s Foods issued a recall May 8 for about 46,612 pounds of pork with 
sauce products after Food Safety and Inspection Service inspectors discovered 
undeclared soy. The products were shipped to retail stores in Alabama and Georgia. 
Source: http://www.fsis.usda.gov/wps/portal/fsis/topics/recalls-and-public-health- 
alerts/recall-case-archive/archive/2015/recall-Q77-20 15-release 

12. May 9, Columbus Dispatch - (Iowa) Bird flu found on more poultry farms in Iowa. 
Iowa officials reported May 8 that 2 more farms housing 4 million chickens had tested 
positive for H5N2 and will be culled once the findings are confirmed, bringing the total 
number of bird flu cases in Iowa to 44 across 12 counties. State officials announced 
that the virus was also detected on five more turkey farms. 

Source: http://www.dispatch.com/content/stories/national world/20 15/05/09/Bird-flu- 
found-on-more-poultry-farms-in-Iowa.html 

[ Return to top ] 

Water and Wastewater Systems Sector 

13. May 11, Southern California City News Service - (California) Imperial Beach closed 
to swimmers due to contaminated runoff. County officials included Imperial Beach 
as part of its existing water contact closure May 10 at the Tijuana Slough National 
Wildlife Refuge shoreline north after water samples indicated that the ocean water was 
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contaminated from a sewage runoff near the U.S. -Mexico border into the Tijuana 
Estuary the week of May 4. Warning signs were posted in the area until tests show that 
the water is safe. 

Source: http://www.cbs8.com/storv/29029702/imperial-beach-closed-to-swimmers- 
due-to-contaminated-runoff 

14. May 10, WHNS 21 Greenville - (North Carolina) Officials: 1,561 gallons of sewage 
spill in Buncombe Co. The Metropolitan Sewage District in Buncombe County 
disinfected and cleaned up a spill after a sewage line in Weaverville discharged 1,561 
gallons of untreated sewage near Reems Creek Tributary May 9. Officials stated that 
the pipe had structural issues which led to the spill and that about 500 gallons of the 
sewage reached the surface waters. 

Source: http://www.foxcarolina.com/storv/29024748/officials-1561-gallons-of-sewage- 
spill-in-buncombe-co 

15. May 9, KABC 7 Los Angeles - (California) Malibu beach closed after sewage spill. 
City officials will test the water May 11 after a beach in Malibu was closed 100 yards 
on each side May 9 after approximately 500 gallons of diluted sewage spilled into the 
ocean. 

Source: http://abc7.com/news/malibu-beach-closed-after-sewage-spill/710395/ 

16. May 9, WQAD 8 Moline - (Iowa) Entire city of Middletown, Iowa under a boil 

order. Officials issued a boil order for the city of Middletown, Iowa, May 9 until 
further notice after crews that were repairing a broken water main found that a second 
main had broken, prompting further repairs. 

Source: http://wqad.com/2015/05/09/entire-city-of-middletown-iowa-under-a-boil- 
order/ 



For additional stories, see items 4 and 10 
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Healthcare and Public Health Sector 

Nothing to report 
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Government Facilities Sector 

17. May 9, St. Louis Post-Dispatch - (Missouri) Progress being made against wildfire in 
Mark Twain National Forest. Crews reached 70 percent containment May 9 of a 
1,300-acre wildfire burning in Mark Twain National Forest in Black, Missouri. 

Source: http://www.stltodav.com/news/local/metro/progress-being-made-against- 
wildfire-in-mark-twain-national-forest/article d8a64cd2-dbe6-5e6b-b4db- 
12bf37658440.html 
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18. May 8, Washington Post - (International) Former Energy Department employee 
indicted in nuclear secrets case. U.S. officials reported May 8 that a former employee 
at the U.S. Department of Energy and the U.S. Nuclear Regulatory Commission was 
deported to the U.S. from the Philippines March 27 and charged for allegedly targeting 
over 80 department employees with emails containing malicious software in an effort 
to extract sensitive nuclear information and sell it to a foreign government. Officials 
stated that no computer virus or malicious code was transferred into government 
computers. 

Source: http://www.washingtonpost.com/world/national-securitv/former-energv- 
department-emplovee-indicted-in-nuclear-secrets-case/2015/05/08/0a84c3ac-f32c- 
1 Ie4-b2f3-af5479e6bbdd story.html 

19. May 7, CNN - (Washington, D.C.) White House fence steel spikes get greenlight, to 
be installed in July. The U.S. National Capital Planning Commission approved plans 
May 7 to install steel spikes on the White House fence in Washington, D.C., in July in 
an effort to increase security measures following a series of fence jumping on White 
House grounds. Officials are working implement a long-term solution by 2016, after 
approving the steel spikes in the interim. 

Source: http://www.cnn.com/2015/05/07/politics/white-house-steel-spike-fence-iulv- 
2015/ 



For another story, see item 1 
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Emergency Services Sector 

20. May 11, Omaha World-Herald - (Nebraska) 2 inmates found dead at Tecumseh 
State Prison, officials say. Nebraska officials reported May 1 1 that 2 inmates were 
found dead at Tecumseh State Prison following a May 10 riot that left 2 other inmates 
injured and caused several disruptions in housing units, resulting in small fires and 
property damage. Prison staff secured the facility after nearly 8 hours and the incident 
remains under investigation. 

Source: http://www.omaha.com/news/crime/tecurnseh-state-correctional-institution- 
workers-inmates-injured-in-prison-riot/article 25 Ib8a66-f76e-lle4-a89d- 
5febbe51124f.html 

21. May 11, Associated Press - (South Dakota) Authorities: Minimum-security inmate 
missing after walking away from South Dakota prison. The South Dakota 
Department of Corrections is searching for an inmate May 1 1 that walked away from 
the minimum-security South Dakota State Penitentiary campus May 10. 

Source: 

http://www.dailyioumal.net/view/storv/f20eb71967c64e32bae83bd0fd842f51/SD~ 

Missing-Inmate/ 

22. May 10, Los Angeles Daily News - (California) LAPD’s Mission Station evacuated 
after woman brings in grenade she found in brother’s bedroom. A bomb squad 
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safety removed and detonated a grenade that was brought into the Los Angeles Police 
Department’s Mission Community Police Station in Mission Hills, and prompted the 
evacuation of the station for nearly 3 hours May 10. The grenade was brought in after a 
woman found it in a family member’s bedroom. 

Source: http://www.dailynews.com/general-news/20150510/lapds-mission-station- 
evacuated-after-woman-brings-in-grenade-she-found-in-brothers-bedroom 
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Information Technology Sector 

23. May 11, Securityweek - (International) Mac Keeper patches serious remote code 
execution flaw. The developers of the MacKeeper utility software suite for Apple OS 
X patched a critical input validation vulnerability which an attacker could exploit to 
remotely execute code on affected systems by tricking victims to visit a specially 
crafted Web site that runs code with root privileges once visited. 

Source: http://www.securitvweek.com/mackeeper-patches-serious-remote-code- 
execution-flaw 

24. May 11, Securityweek - (International) Angler EK makes it difficult to track down 
malvertising sources. A security expert discovered that the Angler Exploit Kit (EK) is 
leveraging Web browser bugs to break the referrer chain, making it more difficult for 
security researchers and advertising networks to determine the kit’s source in the 
campaign. 

Source: http://www.securityweek.com/angler-ek-makes-it-difficult-track-down- 
malvertising-sources 

25. May 8, Threatpost - (International) Wordpress sites backdoored, leaking 
credentials. Security researchers at Zscaler discovered backdoor code compromising 
content management systems (CMS) on a number of WordPress Web sites that 
activates when users input their login credentials. Once activated, the backdoor injects 
JavaScript (JS) code hosted on a command and control (C&C) server. 

Source: https://threatpost.eom/wordpress-sites-backdoored-leaking-credentials/l 12703 

For another story, see item 5 



Internet Alert Dashboard 



To report cyber infrastructure incidents or to request information, please contact US-CERT at soc@us-cert.gov or 
visit their Web site: http://www.us-cert.gov 

Information on IT information sharing and analysis can be found at the IT ISAC (Information Sharing and 
Analysis Center) Web site: http://www.it-isac.org 
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Communications Sector 



Nothing to report 
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Commercial Facilities Sector 

26. May 11, WPVI 6 Philadelphia - (Pennsylvania) 2 hurt in fast-moving apartment fire 
in East Windsor TWP., N.J. A 3-alarm fire May 1 1 at the Windsor Castle Apartments 
in East Windsor Township in Mercer County left 2 people injured and displaced 20 
residents after the fire destroyed 8 units and damaged 8 others. Crews contained the fire 
and the incident is under investigation. 

Source: http://6abc.com/news/2-hurt-in-apartment-fire-in-east-windsor-twp/713288/ 

27. May 10, KXAS 5 Fort Worth - (Texas) Stonebriar Mall evacuated Sunday. 

Stonebriar Centre Mall in Frisco was scheduled to reopen May 1 1 after the mall was 
evacuated May 10 when 2 transformers caught on fire, prompting officials to shut off 
electricity for several hours for repairs. The causes of the fires are under investigation. 
Source: http://www.nbcdfw.com/news/local/Stonebriar-Mall-Evacuated-Sundav- 
303225461.html 

28. May 10, WTNH 8 New Haven - (Connecticut) Meriden condo lire injures 3, 
displaces 100. A May 9 fire at the Crown Village condo complex in Meriden displaced 
about 100 residents after the fire destroyed 22 units in Building 11. 

Source: http://wtnh.com/2015/05/09/fire-crews-battle-blaze-at-meriden-condo- 
building/ 

29. May 9, Softpedia - (Louisiana) US Secret Service alerts InterContinental Hotel 
Group of data breach. The U.S. Secret Service notified the InterContinental Hotel 
Group of a potential breach of its payment processing systems at its Holiday Inn 
Express & Suites hotel in Sulphur, Louisiana, which may have exposed the personal 
and financial information of 613 customers from October 2014 to February 2015. Cities 
Service, an affiliate of InterContinental Hotel Group, notified customers and removed 
the compromised workstation from the network and worked to update its security 
procedures in order to mitigate any future breaches. 

Source: http://news.softpedia.com/news/US-Secret-Service-Alerts-InterContinental- 
Hotel-Group-of-Data-Breach-480663.shtml 

30. May 8, KHON 2 Honolulu - (Hawaii) Dozens quarantined after norovirus outbreak 
on cruise ship. The Hawaii State Department of Health reported May 8 that about 30 
people on the Star Princess cruise ship were quarantined while the ship was docked at 
Lahaina in Maui due to a norovirus outbreak. Cruise line officials stated that staff 
thoroughly cleaned common areas after health authorities determined that the virus 
originated in San Francisco. 

Source: http://kxan.com/2015/05/08/dozens-quarantined-after-norovirus-outbreak-on- 
cruise-ship/ 
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Dams Sector 

Nothing to report 
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Department of Homeland Security (DHS) 

DHS Daily Open Source Infrastructure Report Contact Information 



About the reports - The DHS Daily Open Source Infrastructure Report is a daily [Monday through Friday] 
summary of open-source published information concerning significant critical infrastructure issues. The DHS Daily 
Open Source Infrastructure Report is archived for 10 days on the Department of Homeland Security Web site: 
http://www.dhs.gov/IPDailyReport 

Contact Information 

Content and Suggestions: Send mail to cikr.productfeedback@hq.dhs.gov or contact the DHS 

Daily Report Team at (703) 942-8590 

Subscribe to the Distribution List: Visit the DHS Daily Open Source Infrastructure Report and follow 

instructions to Get e-mail updates when this information changes . 

Removal from Distribution List: Send mail to support@ govdelivery.com . 



Contact DHS 

To report physical infrastructure incidents or to request information, please contact the National Infrastructure 
Coordinating Center at nicc@hq.dhs.gov or (202) 282-9201. 

To report cyber infrastructure incidents or to request information, please contact US -CERT at soc@us-cert.gov or visit 
their Web page at www.us-cert.gov . 

Department of Homeland Security Disclaimer 

The DHS Daily Open Source Infrastructure Report is a non-commercial publication intended to educate and inform 
personnel engaged in infrastructure protection. Further reproduction or redistribution is subject to original copyright 
restrictions. DHS provides no warranty of ownership of the copyright, or accuracy with respect to the original source 
material. 
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